Unfixed XSS vulnerability at www.familien-hvolgaard.dk

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.familien-hvolgaard.dk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.danmaxhk.com

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.danmaxhk.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at boglarnet.hu

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting boglarnet.hu, which at the time of submission ranked 2575841 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It ...

Unfixed XSS vulnerability at www.tanern.com

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.tanern.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at stud.mediehogskolen.no

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting stud.mediehogskolen.no, which at the time of submission ranked 4464002 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at serverparkcapelle.nl

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting serverparkcapelle.nl, which at the time of submission ranked 363414 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at eniact.nl

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting eniact.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at www.eplay.it

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.eplay.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at www.moolandia.com.ar

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.moolandia.com.ar, which at the time of submission ranked 6255890 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.flapag.com.br

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.flapag.com.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It i...

Unfixed XSS vulnerability at hit-fr.net

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting hit-fr.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...

Unfixed XSS vulnerability at ns1.mnet.com.br

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting ns1.mnet.com.br, which at the time of submission ranked 532437 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. I...

Unfixed XSS vulnerability at www.coletta.com.br

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.coletta.com.br, which at the time of submission ranked 2905310 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/200...

Unfixed XSS vulnerability at www.axt.it

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting www.axt.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007. It is...

Unfixed XSS vulnerability at ns1.norteserver.com.br

Security researcher www.nullcode.com.ar, has submitted on 03/10/2007 a cross-site-scripting XSS vulnerability affecting ns1.norteserver.com.br, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/10/2007...

Design/Logic Flaw

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...

CVE-2007-0977

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...

CVE-2007-0977

CVE-2007-0977 involves IBM Lotus Domino R5/R6 WebMail. When the option “Generate HTML for all fields” is enabled (default in these versions), HTTPPassword hashes and related data from names.nsf can be read via ReadViewEntries/OpenDocument on the defaultview, exposing passwords and client/version ...

CVE-2007-0977

IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.nsf in a manner accessible through Readviewentries and OpenDocument requests to the defaultview view, a different vector than CVE-2005-2428...

Lotus Domino <= R6 Webmail Remote Password Hash Dumper Exploit

No description provided by source. !/bin/bash $Id: raptordominohash,v 1.3 2007/02/13 17:27:28 raptor Exp $ raptordominohash - Lotus Domino R5/R6 HTTPPassword dump Copyright c 2007 Marco Ivaldi [email protected] Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, ...